Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa
File: 5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa (raw, json)
Hash identifier: L8QIENT9TvRIk4XYhxrvBeaPXdrBM5XF1/VhBkDuYa0=
Subject key identifier: 60:65:E8:64:08:40:F2:7F:66:A7:A4:04:09:09:AC:A2:B2:94:32:9D
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E173DAC506F6A09EEE7B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 172.71.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:73:da:c5:06:f6:a0:9e:ee:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=b1c056b8-90ee-4f52-91a3-2f79659d8c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:c5:24:76:93:23:04:86:1b:e1:e8:f9:a1:
72:7e:9c:81:b7:46:30:72:c7:04:06:3a:3e:3a:5e:
1d:1a:8b:d9:ec:0e:ea:8a:e0:1b:fa:76:44:70:5b:
56:43:78:2b:ae:67:f4:dc:41:54:cc:7e:0a:1b:6e:
c0:f4:c3:2e:56:b0:c6:5c:0f:f0:ad:c9:80:72:14:
3f:1d:25:79:a7:9f:aa:13:6f:c8:52:62:e8:dc:af:
fc:3a:54:a6:37:be:25:0f:5c:c3:3c:0c:7d:74:06:
bb:90:d6:ec:72:76:76:45:3c:33:30:e8:30:35:73:
90:da:19:6f:fd:0f:dd:bf:fd:ea:85:35:f0:76:12:
46:9f:c3:f5:bf:5a:9e:20:73:15:86:c9:31:33:71:
6c:c6:c1:11:0b:37:24:1f:22:a2:fa:ce:1e:f6:f3:
b6:09:2b:30:0a:f8:2c:57:e9:b4:24:83:dc:1a:eb:
2e:85:b2:e7:9d:9a:4c:23:59:5c:c1:d8:bf:69:3a:
a3:af:d7:c0:85:52:08:8c:bd:20:6c:29:66:8c:a9:
2b:c7:c4:4b:48:8c:27:1f:4a:66:b8:65:2d:68:f9:
21:18:4f:2f:63:bb:ff:18:14:66:0f:80:d5:06:42:
2d:ef:7c:0f:74:c8:c1:40:3f:61:dc:f9:66:c9:36:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:65:E8:64:08:40:F2:7F:66:A7:A4:04:09:09:AC:A2:B2:94:32:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.71.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:06:92:d8:1e:c6:75:b1:dc:f8:37:ee:fe:14:45:fd:93:bf:
f3:17:5e:4a:b0:aa:05:4a:b1:43:c5:5f:99:8c:8e:d6:12:2f:
9d:62:14:a1:88:c8:98:3c:ed:f9:ac:3f:96:61:d4:0e:4b:6e:
48:bb:9b:0e:4f:03:11:69:da:92:70:0e:bf:a4:da:09:bc:61:
03:ea:e6:43:e3:be:46:51:63:b8:b3:a3:31:e6:b7:50:8d:26:
ab:e4:de:f4:66:14:ea:56:b2:2c:7a:12:7c:db:19:4b:0b:36:
fe:28:f0:41:a6:68:9d:eb:ee:13:02:12:22:f2:4c:6a:a6:48:
da:c5:cf:56:8e:e5:44:f3:33:b8:74:57:73:e1:f7:be:70:1e:
70:b4:c8:65:39:94:a3:4a:96:4c:1a:16:91:c1:10:b3:8d:ec:
4c:36:4a:7f:07:fe:77:69:fe:dd:c1:4a:be:1d:da:c0:52:9e:
39:f1:2c:dc:1d:81:8e:ca:07:e1:52:6e:ff:ca:0a:68:ac:18:
9f:04:19:12:ad:73:01:f2:61:1f:2d:11:2e:b9:d0:be:89:42:
83:c9:34:5c:bb:36:1d:51:76:9a:84:7b:d3:7b:12:17:58:b0:
b6:0e:fe:2c:78:95:7c:c9:66:7c:3b:7a:ea:02:b7:6e:50:21:
14:8c:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:43 2025 by rpki-client